Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
File:                     NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft (raw, json)
Hash identifier:          V350KjFH84MB3ydbZxrNAa/RS/WY0ImHNnRabA3MkQ0=
Subject key identifier:   23:1A:10:3B:B6:62:FC:FC:93:D2:11:59:FE:5C:54:5C:DE:84:69:C3
Authority key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3
Certificate issuer:       /CN=A91BB9EF/serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
Manifest number:          48
Signing time:             Sun 05 Apr 2026 07:40:59 +0000
Manifest this update:     Sun 05 Apr 2026 07:40:59 +0000
Manifest next update:     Sun 12 Apr 2026 07:40:59 +0000
Files and hashes:         1: NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl (hash: tJ2gmFxSEQ69esnq0oDaFmWkIV+W1LGKpxAN32hKwy4=)
                          2: E57517B0C84F11F0B9AA990CC4F9AE02.roa (hash: PoRqLZ1iDKniKKiDSN0IaMYeEcnEhdUqkDtLadUJ/NE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl
                          rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3
        Validity
            Not Before: Apr  5 07:40:59 2026 GMT
            Not After : Apr 12 07:40:59 2026 GMT
        Subject: CN=69d2120b-8716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:de:30:0b:3e:f8:18:ce:7c:76:99:ad:e4:
                    f2:d2:09:c9:9f:49:93:40:01:8d:15:49:3a:ba:78:
                    cf:df:34:00:ae:4d:96:a8:e0:bf:ef:8c:f4:b4:71:
                    16:f3:18:a7:5d:7f:28:cb:ff:52:5a:00:51:98:e2:
                    64:7f:67:fb:51:32:3c:a9:5a:c2:14:75:0a:a5:1a:
                    43:20:c3:ef:90:3e:b6:a8:71:4e:db:0f:94:34:53:
                    03:4f:f7:9e:b8:93:ca:78:d9:ed:dc:90:dc:cd:52:
                    b7:a6:b0:43:40:64:f3:f3:bd:d8:56:88:c7:0e:4d:
                    4a:ce:ac:95:30:d0:61:4e:e9:5d:ed:3e:1b:d9:c6:
                    c9:95:79:0e:b1:76:81:6f:4a:dc:59:01:bd:14:bf:
                    ef:64:86:8c:f4:e3:f9:98:df:ac:2b:60:c1:78:6c:
                    c0:b2:67:e5:84:71:f8:53:93:21:70:a0:e7:fa:04:
                    01:a2:92:fa:a7:81:b8:d5:d3:0e:12:5a:a3:9d:a5:
                    ac:82:64:5c:c7:9e:61:94:1d:3b:9b:e9:73:9f:55:
                    d6:66:3b:71:4e:c9:b5:ee:47:04:ed:82:cb:1b:97:
                    db:ca:93:19:12:33:08:ba:c0:f8:40:35:f7:8e:7e:
                    38:de:dc:48:ec:64:f1:5c:42:94:0e:b0:00:67:02:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1A:10:3B:B6:62:FC:FC:93:D2:11:59:FE:5C:54:5C:DE:84:69:C3
            X509v3 Authority Key Identifier:
                keyid:34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:75:df:aa:d6:9c:ba:fb:73:3d:1a:62:6c:05:9f:f7:59:5f:
         3f:bd:c2:40:55:05:e7:48:eb:15:50:5f:b5:fe:a1:39:61:ad:
         83:b6:37:ee:da:05:10:f2:89:46:79:7a:fe:0b:d5:7e:13:68:
         1e:d2:98:1e:26:10:db:24:70:e9:51:c6:0f:19:b8:b6:0c:29:
         96:22:d9:55:41:bd:ca:59:a4:a8:7a:2e:1b:de:f3:36:cb:a7:
         a0:e7:26:40:33:b8:f4:4e:3c:6f:5b:f2:71:32:87:5a:7a:b1:
         27:bb:73:a2:41:8d:65:d7:92:ff:49:f0:53:a2:90:cd:c4:9a:
         7e:24:0a:c9:4d:6a:76:a7:5e:e0:1e:37:46:33:a3:38:59:bb:
         66:c0:1f:77:90:95:65:1e:06:16:1a:77:4b:8e:3f:49:c4:9f:
         03:ca:e9:7d:02:31:ca:65:c9:07:69:9c:c0:32:b4:8b:f9:ea:
         6a:27:9d:01:51:e6:d2:eb:dd:52:08:3f:49:fb:50:c9:7c:33:
         1c:ce:24:dd:a9:d9:17:50:1f:3e:d8:a1:b0:39:b7:ab:31:ab:
         9d:91:df:5e:bc:f4:78:89:82:a7:fa:58:dd:82:ea:8a:37:4f:
         23:b4:6b:45:20:ef:dd:43:ca:e5:3a:39:55:56:25:06:e1:eb:
         f5:4c:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:44 2026 by rpki-client